General
- Target 2026-08-19_b5bb8033082ad76fcf94adc86642cd6c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 994KB
- Sample260819-we6pyazbla
- SHA256 5c5e15d33a9d865847f48578745e92ec9a60b940a2d881f5771d82e72d3c4195
- MD5 b5bb8033082ad76fcf94adc86642cd6c
- SHA1 c3cc9a438ba2fe02db068a865b8e5559250f07e0
- SHA512 c7305c6d69f27b875d15c10f86f0a199d2c4887a17b7ab6c906c76e7c1690ce5561c71a7fb5d4298efa8ddfd287b904034801628cb287ff4c0cd12c74ec6b581
- SSDEEP 12288:EwKfOVRo9yRYt9kLmzV4O8b8ITDnl2F1OlTigk:ExWVeyRYt9kLmzV4O8b8ITDnl2F3gk
- TLSH T1D625F822B3E84115F5F77B3099B94EA02A377C516EB5C28E3284370E5E75BA0DD22727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_b5bb8033082ad76fcf94adc86642cd6c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_b5bb8033082ad76fcf94adc86642cd6c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b5bb8033082ad76fcf94adc86642cd6c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 994KB
- SHA256 5c5e15d33a9d865847f48578745e92ec9a60b940a2d881f5771d82e72d3c4195
- MD5 b5bb8033082ad76fcf94adc86642cd6c
- SHA1 c3cc9a438ba2fe02db068a865b8e5559250f07e0
- SHA512 c7305c6d69f27b875d15c10f86f0a199d2c4887a17b7ab6c906c76e7c1690ce5561c71a7fb5d4298efa8ddfd287b904034801628cb287ff4c0cd12c74ec6b581
- SSDEEP 12288:EwKfOVRo9yRYt9kLmzV4O8b8ITDnl2F1OlTigk:ExWVeyRYt9kLmzV4O8b8ITDnl2F3gk
- TLSH T1D625F822B3E84115F5F77B3099B94EA02A377C516EB5C28E3284370E5E75BA0DD22727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory